EMALL is a procurement and collaborative commerce portal for the U.S.
Department of Defense and based on J2EE and WebLogic Platform 8.1. One core
component of EMALL is a rule engine based on WebLogic Platform 8.1.
EMALL integrates with Web applications, based on .NET and J2EE technology,
through which DOD personnel submit and track orders. The rule engine
validates these orders and submits requisitions to various defense suppliers.
All of these systems interoperate, using ebXML 2.0, under stringent security
requirements. In our previous article (WLDJ, Vol. 3, issue 1), we discussed
the overall EMALL architecture. In this article, we will describe how we
leveraged security aspects of the BEA WebLogic Platform to implement security
solutions.
Security Requirements for EMALL
We will review and discuss some critical security requirements and analyze
the threats and risk... (more)
EMALL is a procurement portal for the U.S. Department of Defense. Defense and
federal personnel use it to shop for items ranging from office supplies and
equipment to weapons systems. The personnel have various levels of privileges
to access classified catalogs and place orders.
They create "shopping carts" and submit their orders through a Web
application. EMALL processes these orders via a rule engine with complex
validation rules. After validating the orders, it sends requisitions to a
supplier's system. Various authorized users can then track these orders.
Hundreds of vendors... (more)